feat: add iOS support and harden receipt scanning

app/ios/ScanReceipts/Networking/AccountAPI.swift

@@ -0,0 +1,46 @@
+import Foundation
+
+/// Account-management calls that aren't part of the core auth flow
+/// (`AuthAPI`) — password change and the irreversible delete-account flow.
+enum AccountAPI {
+    struct ChangePasswordBody: Encodable {
+        let currentPassword: String
+        let newPassword: String
+        let remember: Bool
+    }
+
+    /// `POST /api/auth/change-password`. On success the backend rotates
+    /// EVERY session for the account (including this device's) and issues a
+    /// brand-new one — but that new session is delivered as a cookie on the
+    /// web path only. For a Bearer client the safest move is to log the user
+    /// out locally and have them log back in with the new password, so do
+    /// that here rather than trying to recover a token this endpoint doesn't
+    /// return.
+    static func changePassword(currentPassword: String, newPassword: String) async throws {
+        let request = try APIRequest.json(
+            path: "/api/auth/change-password",
+            method: .post,
+            body: ChangePasswordBody(currentPassword: currentPassword, newPassword: newPassword, remember: true)
+        )
+        try await APIClient.shared.sendDiscardingResponse(request)
+    }
+
+    struct DeleteAccountBody: Encodable {
+        let password: String?
+        let confirmEmail: String
+    }
+
+    /// `DELETE /api/auth/delete-account`. Irreversible. `password` is
+    /// required for accounts that have one (omit only for a Google-only
+    /// account, which has no password to check); `confirmEmail` must equal
+    /// the account's email exactly, case-sensitively, matching the web
+    /// confirmation flow's "type your email to confirm" pattern.
+    static func deleteAccount(password: String?, confirmEmail: String) async throws {
+        let request = try APIRequest.json(
+            path: "/api/auth/delete-account",
+            method: .delete,
+            body: DeleteAccountBody(password: password, confirmEmail: confirmEmail)
+        )
+        try await APIClient.shared.sendDiscardingResponse(request)
+    }
+}